Feature · Prioritization

Three hundred alerts, three that matter.

A vulnerability's severity doesn't tell you whether it will be exploited. LibWatch puts vulnerabilities already under attack first, sorts the others by severity and shows their exploit probability.

Sort my vulnerabilities
Read with an AI .md version

Three signals

EPSS

Exploit probability

FIRST's score, updated daily: the likelihood that a vulnerability will be exploited within 30 days.

KEV

Observed exploitation

CISA's catalog of vulnerabilities exploited in the wild. A KEV vulnerability goes to the top.

CERT-FR

French alerts

ANSSI's advisories and alerts on PHP, matched against your projects' PHP version.

Example

Same severity, different priorities

Fictional example: three vulnerabilities rated “high.” The exploited one goes to the top; EPSS, shown alongside, helps tell the other two apart.

Vulnerability Severity EPSS Exploited LibWatch order
Vulnerability A · payment package High 62% Yes · KEV First · KEV
Vulnerability B · image library High 8% No By severity
Vulnerability C · testing tool High 0.2% No By severity

In your alerts

An “exploited only” filter, and an alert when that changes

Filter on exploited vulnerabilities, and get notified when an already known vulnerability enters the KEV catalog.

A vulnerability just entered the KEV catalog Example · online store · WooCommerce
  • woocommerce 9.1.2 · EPSS 71% Exploited (KEV)

Fixed version: 9.1.4

Frequently asked questions

About prioritization

Is a vulnerability without an EPSS score ignored?
No. EPSS changes neither the order nor the score: a vulnerability without EPSS is ranked by its severity, like the others.
Is CVSS still shown?
Yes. Each vulnerability keeps its CVSS score, which sets its severity: critical from 9, high from 7 to 8.9. A vulnerability in the KEV catalog goes ahead of the others; EPSS is shown as well, without changing the order.
Can I set my own alert thresholds?
You choose which alerts you receive: critical vulnerabilities (CVSS 9 and above), major ones (7 to 8.9) or minor ones, a vulnerability entering the KEV catalog, the Monday digest. There is no EPSS threshold to set.

Start with the three vulnerabilities that matter.

Try it for 14 days